CVE-2015-5250

CWE-20 — Improper Input Validation7 documents6 sources
Severity
4.0MEDIUM
EPSS
0.5%
top 36.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Github.com Openshift/originRedhat Openshift Origin
Timeline
PublishedSep 8
Latest updateAug 21

Description

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

4
OSV
Denial of Service in OpenShift Origin in github.com/openshift/origin↗2024-08-21
▶
GHSA
Denial of Service in OpenShift Origin↗2021-12-20
▶
OSV
Denial of Service in OpenShift Origin↗2021-12-20
▶
CVEList
CVE-2015-5250: The API server in OpenShift Origin 1↗2015-09-08
▶

📋Vendor Advisories

1
Red Hat
OpenShift: Malformed JSON can cause API process crash↗2015-09-03
▶

💬Community

1
Bugzilla
CVE-2015-5250 OpenShift: Malformed JSON can cause API process crash↗2015-09-03
▶
CVE-2015-5250 (MEDIUM CVSS 4) | The API server in OpenShift Origin | cvebase.io